@capgo/capacitor-native-biometric 8.3.1 → 8.3.3

package/android/src/main/java/ee/forgr/biometric/NativeBiometric.java

@@ -363,12 +363,15 @@ public class NativeBiometric extends Plugin {
         Cipher cipher;
         cipher = Cipher.getInstance(TRANSFORMATION);
 
-        // Generate a random IV for each encryption operation
-        byte[] iv = new byte[GCM_IV_LENGTH];
-        SecureRandom secureRandom = new SecureRandom();
-        secureRandom.nextBytes(iv);
-
-        cipher.init(Cipher.ENCRYPT_MODE, getKey(KEY_ALIAS), new GCMParameterSpec(128, iv));
+        // Let the system generate the IV to comply with hardware-backed keystore requirements
+        // Modern Android devices with StrongBox/TEE enforce RandomizedEncryption and reject caller-provided IVs
+        cipher.init(Cipher.ENCRYPT_MODE, getKey(KEY_ALIAS));
+        byte[] iv = cipher.getIV(); // Retrieve the system-generated IV
+        if (iv == null || iv.length != GCM_IV_LENGTH) {
+            throw new GeneralSecurityException(
+                "Failed to generate valid IV: expected " + GCM_IV_LENGTH + " bytes, got " + (iv == null ? "null" : iv.length + " bytes")
+            );
+        }
         byte[] encryptedBytes = cipher.doFinal(stringToEncrypt.getBytes(StandardCharsets.UTF_8));
 
         // Prepend IV to the encrypted data

package/ios/Sources/NativeBiometricPlugin/NativeBiometricPlugin.swift

@@ -11,7 +11,7 @@ import LocalAuthentication
 
 @objc(NativeBiometricPlugin)
 public class NativeBiometricPlugin: CAPPlugin, CAPBridgedPlugin {
-    private let pluginVersion: String = "8.3.1"
+    private let pluginVersion: String = "8.3.3"
     public let identifier = "NativeBiometricPlugin"
     public let jsName = "NativeBiometric"
     public let pluginMethods: [CAPPluginMethod] = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capgo/capacitor-native-biometric",
-  "version": "8.3.1",
+  "version": "8.3.3",
   "description": "This plugin gives access to the native biometric apis for android and iOS",
   "main": "dist/plugin.cjs.js",
   "module": "dist/esm/index.js",